Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
File:                     gJ7_H3gZuBdR8XerWv7YK8wypWk.mft (raw, json)
Hash identifier:          CP5iskb2mnFzQeDXIUKBRXzrS9VjQ7dBFZaTZ3GMGrg=
Subject key identifier:   6F:9F:E0:27:B6:0A:5F:0C:40:45:DE:95:D7:A5:74:44:DF:D0:67:6F
Authority key identifier: 80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69
Certificate issuer:       /CN=A9158028/serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
Certificate serial:       071D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
Manifest number:          0715
Signing time:             Mon 12 Oct 2026 22:15:20 +0000
Manifest this update:     Mon 12 Oct 2026 22:15:20 +0000
Manifest next update:     Mon 19 Oct 2026 22:15:20 +0000
Files and hashes:         1: gJ7_H3gZuBdR8XerWv7YK8wypWk.crl (hash: vMLNSsJys4GcVK6jrv90OKtO6ykKR9l4Woz8QcuN6ms=)
                          2: 687D7178B85D11EBB2E17F26C4F9AE02.roa (hash: M577gprOgopViMBlM2br8rPqwyVug+teBZ5+ccpEPA8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl
                          rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 19 Oct 2026 22:15:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1821 (0x71d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158028, serialNumber=809EFF1F7819B81751F177AB5AFED82BCC32A569
        Validity
            Not Before: Oct 12 22:15:20 2026 GMT
            Not After : Oct 19 22:15:20 2026 GMT
        Subject: CN=6acd5bf8-1252
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b5:22:0d:fd:b4:8b:56:64:d3:20:40:bf:8c:
                    11:fd:a0:59:a8:b9:17:78:59:29:74:81:36:ce:88:
                    10:73:31:4b:32:ce:8e:fd:97:09:ea:cd:c9:f7:5f:
                    8a:2e:ed:66:b6:86:53:2f:c9:f7:3c:f4:fb:61:87:
                    34:3b:6c:41:e8:ab:43:ec:37:a6:39:73:b8:58:7f:
                    92:d3:6f:be:39:32:2f:6f:76:ff:b7:49:82:0a:61:
                    4d:2e:a7:b7:5c:41:2a:fa:4d:2d:3f:c8:14:1c:14:
                    80:11:ef:60:1a:e5:74:a5:bc:37:4a:fc:3d:b6:26:
                    7d:f7:f0:c9:20:d7:79:d7:2a:86:a5:2d:6c:86:c5:
                    54:5f:c3:f8:ba:e8:ff:8c:59:4c:63:5f:6d:24:01:
                    2d:3a:e2:e4:e7:b5:b6:35:02:a5:57:5b:9a:8a:f1:
                    8e:c5:52:50:5f:aa:c2:e3:69:8c:72:15:5c:e7:09:
                    67:3f:3f:55:b4:0a:23:eb:98:a0:d2:49:1a:a5:e9:
                    05:c8:d6:b0:af:37:e0:d0:a6:2f:f2:36:0a:bc:1d:
                    55:20:27:96:70:a7:54:8d:fe:25:29:eb:36:09:40:
                    94:3e:63:16:52:7d:20:ee:7c:9c:fd:8f:a3:d5:a2:
                    85:1c:7c:47:1d:1e:b9:38:f7:e3:6a:d4:62:21:07:
                    6c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9F:E0:27:B6:0A:5F:0C:40:45:DE:95:D7:A5:74:44:DF:D0:67:6F
            X509v3 Authority Key Identifier:
                keyid:80:9E:FF:1F:78:19:B8:17:51:F1:77:AB:5A:FE:D8:2B:CC:32:A5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gJ7_H3gZuBdR8XerWv7YK8wypWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158028/8A4ADEE4A11F11EB9339D50AC4F9AE02/gJ7_H3gZuBdR8XerWv7YK8wypWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:38:1b:84:4f:18:fe:68:88:5d:60:eb:c9:26:e8:a9:f3:1f:
         86:da:f5:fa:28:9a:66:89:ce:0f:ed:da:a7:bd:61:3c:cc:c7:
         f2:81:fc:83:a6:3b:c0:af:50:a8:23:73:6b:60:7f:cc:36:4a:
         d2:84:78:0b:d2:a2:61:0c:0c:1e:c7:05:74:b1:e0:46:7e:28:
         6d:9e:ce:c2:10:ce:a2:ab:52:ae:3d:04:65:fc:20:83:2a:d8:
         51:98:ce:ae:f9:bb:e1:f3:fa:71:97:90:57:d2:97:f2:2a:5c:
         af:3b:c8:bc:ef:05:d5:af:23:e7:de:5e:45:48:3b:69:3b:0d:
         45:e1:a5:70:06:de:b5:a3:40:96:fe:8b:e1:e8:92:65:1e:8e:
         c0:48:aa:30:45:6c:6f:00:c1:29:46:ad:5a:4a:d1:8d:e4:04:
         dc:8b:00:25:44:6e:74:06:4d:23:64:9c:46:b5:e5:18:0d:36:
         ed:d4:07:e2:38:85:e8:9c:0b:08:c0:be:c2:aa:dc:f7:9a:5c:
         7e:13:0e:eb:01:ee:d4:cd:03:f0:88:ae:0b:e4:2d:66:d3:d9:
         4a:0a:7d:b0:9b:5a:47:cd:21:c0:67:0e:b7:51:4e:ff:7b:6b:
         5a:01:42:d2:28:70:e0:1e:d1:3a:26:60:e0:a1:04:20:52:7b:
         7f:9c:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:31:14 2026 by rpki-client